Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
File: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft (raw, json)
Hash identifier: zKuYC2oGU+2ATQS/1x0IZSvDvvDJgI8J1LEQhPU88do=
Subject key identifier: D8:B6:80:95:17:1F:6C:2A:F2:6D:38:BC:19:1A:7B:79:14:2C:C1:33
Authority key identifier: AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
Certificate issuer: /CN=af036816a317dd99d25383a32a681859c047b5ff
Certificate serial: 01977D8C51A18B93ED023173FF939F840EA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
Manifest number: 0FF3
Signing time: Tue 17 Jun 2025 11:00:37 +0000
Manifest this update: Tue 17 Jun 2025 11:00:37 +0000
Manifest next update: Wed 18 Jun 2025 11:00:37 +0000
Files and hashes: 1: dv2-CubAEzDgm9-A6q6tebm8sb8.roa (hash: TsKOArcBjp/tutNspO+BZ3fNFViji2g9Yje5CxDDQXE=)
2: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl (hash: dBGR0JxjN8xM+JYHt68c764tfg+RDbiMvGdMUkT2fQw=)
3: uPmBIiMy_mwoAMwRr2tHb8mN_DQ.roa (hash: HueNCAsjAp0HpCdgeRDBaDeI3suLIq9xXvHT44od5wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:8c:51:a1:8b:93:ed:02:31:73:ff:93:9f:84:0e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af036816a317dd99d25383a32a681859c047b5ff
Validity
Not Before: Jun 17 11:00:37 2025 GMT
Not After : Jun 18 11:00:37 2025 GMT
Subject: CN=d8b68095171f6c2af26d38bc191a7b79142cc133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:03:f9:62:be:87:da:fe:f0:7f:e3:b9:58:
ca:6b:06:3c:2b:7b:1d:61:d4:12:1e:03:50:52:cd:
01:c3:52:6a:01:40:19:66:fd:7d:58:be:fe:03:69:
d3:12:ac:b5:11:89:cd:eb:42:e1:38:76:45:a4:2e:
9a:12:4d:10:16:60:12:04:1d:72:4b:b5:8d:7e:7e:
b9:5a:3e:0b:00:01:62:f8:6a:9a:4f:e2:d2:ec:b3:
2a:8f:d0:c7:54:63:30:47:ca:d0:f9:a9:7f:43:f0:
60:b6:06:0d:34:31:4f:60:ae:34:69:41:f3:3d:f4:
87:6e:e8:d1:21:05:ed:36:37:d4:44:84:63:e1:0d:
7b:94:0a:67:ae:b6:65:7e:94:eb:fb:15:19:91:09:
81:ef:08:51:90:d7:ab:ee:e7:ad:4d:04:ef:c5:ee:
55:98:42:d5:ae:7e:d4:9d:8b:be:d1:91:c4:20:b7:
a2:31:e9:bf:23:50:7e:3a:11:bf:5b:17:b1:be:9b:
94:6c:f6:91:7f:01:b9:d2:e3:db:ca:64:91:82:77:
89:a4:ee:5f:00:b5:15:99:1a:ee:fb:48:67:2a:7f:
45:3a:18:62:7e:5d:a5:34:8d:6b:2c:30:dd:6b:3c:
b9:1a:dd:6d:ea:79:89:39:53:38:69:44:81:f6:de:
c4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B6:80:95:17:1F:6C:2A:F2:6D:38:BC:19:1A:7B:79:14:2C:C1:33
X509v3 Authority Key Identifier:
keyid:AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3c:cc:ba:73:19:70:d7:b7:b3:43:ae:9e:dd:5c:03:46:d1:
2b:a5:72:d9:74:f1:99:e9:16:24:80:ef:13:e4:a5:75:8a:10:
77:6d:43:89:ea:fa:25:1f:f1:28:24:68:e4:fb:3f:75:be:00:
d0:7a:18:25:7b:95:f6:ba:3e:5b:1a:a1:d4:cf:8c:a2:98:1c:
75:1b:e4:94:a0:b3:bb:e3:fe:0a:14:d3:fd:5e:41:5b:78:3b:
4d:21:56:30:70:95:ed:82:9f:31:c1:c4:1d:35:57:90:34:39:
6c:e9:c6:5d:7c:45:00:ba:96:6f:e8:b3:a5:3c:73:de:9e:99:
2d:7d:44:66:c8:2d:51:17:d9:18:4b:4c:24:b3:66:20:be:0e:
8a:a8:4c:21:a8:8a:02:4a:d6:33:4b:da:c0:f2:cb:e5:c2:07:
bb:24:56:d6:8a:2b:27:90:f9:2e:fa:18:44:87:d1:1f:35:2c:
67:b1:85:03:2b:f4:f2:fb:ac:37:2c:4c:40:a2:76:7e:ae:89:
81:9a:43:43:f2:d5:4d:8d:b8:25:6a:f4:83:d9:87:c8:3b:53:
26:26:8b:bd:f1:1e:d5:bc:ef:58:e1:15:71:93:44:0f:27:de:
84:9d:0a:3a:81:c1:68:20:26:47:6e:4d:cf:93:dc:24:6d:48:
15:68:72:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd9jFGhi5PtAjFz/5OfhA6iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMDM2ODE2YTMxN2RkOTlkMjUzODNhMzJhNjgxODU5YzA0
N2I1ZmYwHhcNMjUwNjE3MTEwMDM3WhcNMjUwNjE4MTEwMDM3WjAzMTEwLwYDVQQD
EyhkOGI2ODA5NTE3MWY2YzJhZjI2ZDM4YmMxOTFhN2I3OTE0MmNjMTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEYD+WK+h9r+8H/juVjKawY8K3sd
YdQSHgNQUs0Bw1JqAUAZZv19WL7+A2nTEqy1EYnN60LhOHZFpC6aEk0QFmASBB1y
S7WNfn65Wj4LAAFi+GqaT+LS7LMqj9DHVGMwR8rQ+al/Q/BgtgYNNDFPYK40aUHz
PfSHbujRIQXtNjfURIRj4Q17lApnrrZlfpTr+xUZkQmB7whRkNer7uetTQTvxe5V
mELVrn7UnYu+0ZHEILeiMem/I1B+OhG/WxexvpuUbPaRfwG50uPbymSRgneJpO5f
ALUVmRru+0hnKn9FOhhifl2lNI1rLDDdazy5Gt1t6nmJOVM4aUSB9t7EjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNi2gJUXH2wq8m04vBkae3kULMEzMB8GA1UdIwQY
MBaAFK8DaBajF92Z0lODoypoGFnAR7X/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcndOb0ZxTVgzWm5TVTRPakttZ1lXY0JIdGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81MmIxOTktOWUxZi00ZWM3LWIwYWEt
NGE0ZTBmNDI0ZjE3LzEvcndOb0ZxTVgzWm5TVTRPakttZ1lXY0JIdGY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS81MmIxOTktOWUxZi00ZWM3LWIwYWEtNGE0ZTBmNDI0ZjE3
LzEvcndOb0ZxTVgzWm5TVTRPakttZ1lXY0JIdGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjzMunMZ
cNe3s0Ount1cA0bRK6Vy2XTxmekWJIDvE+SldYoQd21Dier6JR/xKCRo5Ps/db4A
0HoYJXuV9ro+Wxqh1M+MopgcdRvklKCzu+P+ChTT/V5BW3g7TSFWMHCV7YKfMcHE
HTVXkDQ5bOnGXXxFALqWb+izpTxz3p6ZLX1EZsgtURfZGEtMJLNmIL4OiqhMIaiK
AkrWM0vawPLL5cIHuyRW1oorJ5D5LvoYRIfRHzUsZ7GFAyv08vusNyxMQKJ2fq6J
gZpDQ/LVTY24JWr0g9mHyDtTJiaLvfEe1bzvWOEVcZNEDyfehJ0KOoHBaCAmR25N
z5PcJG1IFWhyYg==
-----END CERTIFICATE-----
Generated at Tue Jun 17 16:16:38 2025 by rpki-client